René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"[Python]: CWE-611: XXE","articleBody":"## Query\r\n\r\nRelevant PR: https://github.com/github/codeql/pull/6112\r\n\r\n## Report\r\n\r\nParsing untrusted XML files with a weakly configured XML parser may lead to an XML External Entity (XXE) attack.\r\nThis type of attack uses external entity references to access arbitrary files on a system, carry out denial of\r\nservice, or server side request forgery. Even when the result of parsing is not returned to the user, out-of-band\r\ndata retrieval techniques may allow attackers to steal sensitive data. Denial of services can also be carried out\r\nin this situation.\r\n\r\nThere are many XML parsers for Python, and most of them are vulnerable to XXE because their default settings enable\r\nparsing of external entities. This query currently identifies vulnerable XML parsing from the following parsers: \r\n\u003ccode\u003exml.etree.ElementTree.XMLParser\u003c/code\u003e, \u003ccode\u003elxml.etree.XMLParser\u003c/code\u003e, \u003ccode\u003elxml.etree.get_default_parser\u003c/code\u003e,\r\n\u003ccode\u003exml.sax.make_parser\u003c/code\u003e.\r\n- [x] Are you planning to discuss this vulnerability submission publicly? (Blog Post, social networks, etc). *We would love to have you spread the word about the good work you are doing*\r\n\r\n## Result(s)\r\n\r\nNew:\r\n* * CVE-2021-44556\r\n* * CVE-2021-44557\r\n\r\nAlready existing:\r\n* CVE-2016-5851\r\n* CVE-2020-10799\r\n* CVE-2021-29421\r\n* CVE-2013-1665","author":{"url":"https://github.com/jorgectf","@type":"Person","name":"jorgectf"},"datePublished":"2021-08-25T15:18:16.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":15},"url":"https://github.com/424/securitylab/issues/424"}